Техническая информация
- %HOMEPATH%\desktop\508softwareandos.doc
- %HOMEPATH%\desktop\adhd_and_obesity.docx
- %HOMEPATH%\desktop\aoc_saq_d_v3_merchant.docx
- %HOMEPATH%\desktop\applicantform_en.doc
- %HOMEPATH%\desktop\contoso.cer
- %HOMEPATH%\desktop\dashborder_144.bmp
- %HOMEPATH%\desktop\default.bmp
- %HOMEPATH%\desktop\delete.avi
- %HOMEPATH%\desktop\glidescope_review_rev_010.docx
- %HOMEPATH%\desktop\508softwareandos.doc.lcryx
- %HOMEPATH%\desktop\adhd_and_obesity.docx.lcryx
- %HOMEPATH%\desktop\aoc_saq_d_v3_merchant.docx.lcryx
- %HOMEPATH%\desktop\applicantform_en.doc.lcryx
- %HOMEPATH%\desktop\contoso.cer.lcryx
- %HOMEPATH%\desktop\dashborder_144.bmp.lcryx
- %HOMEPATH%\desktop\default.bmp.lcryx
- %HOMEPATH%\desktop\desktop.ini.lcryx
- '<SYSTEM32>\wscript.exe' "<PATH_SAMPLE>.vbs" /elevated
- '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\508softwareandos.doc.lcryx
- '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\adhd_and_obesity.docx.lcryx
- '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\aoc_saq_d_v3_merchant.docx.lcryx
- '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\applicantform_en.doc.lcryx
- '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\contoso.cer.lcryx
- '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\dashBorder_144.bmp.lcryx
- '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\default.bmp.lcryx
- '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\delete.avi.lcryx
- '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\desktop.ini.lcryx